Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: O6BlzWH4zC8EArqwntLDSAps7PUGhHincYkQia7RkKM=
Subject key identifier: 48:83:D8:A6:71:49:70:66:EE:EC:23:EF:14:64:61:09:D3:C7:BE:15
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 0197B7EA9FD4BFF2E6D7E396222FF9AC6207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0ABA
Signing time: Sat 28 Jun 2025 19:01:36 +0000
Manifest this update: Sat 28 Jun 2025 19:01:36 +0000
Manifest next update: Sun 29 Jun 2025 19:01:36 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: vb8R6bIxv3O7AIlrDXkQvdOcGVbbSINt6s6rrQ7v2rY=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:9f:d4:bf:f2:e6:d7:e3:96:22:2f:f9:ac:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Jun 28 19:01:36 2025 GMT
Not After : Jun 29 19:01:36 2025 GMT
Subject: CN=4883d8a671497066eeec23ef14646109d3c7be15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:dd:5e:76:3f:96:67:3c:03:2f:78:2e:8c:
e6:94:de:84:f4:3a:9d:f5:78:55:28:1c:54:cb:3b:
66:b2:96:d6:39:f1:d8:39:87:8a:3f:09:dc:b9:b1:
01:a3:c5:da:06:73:52:e4:57:6d:c0:72:50:0b:ce:
72:69:de:60:a6:fc:ee:0b:2b:b5:db:be:6e:b2:0f:
05:16:7a:14:cd:e6:fc:61:1f:9c:3c:0b:f7:c3:3c:
f5:2d:e2:e5:53:59:ca:79:b9:1a:f8:e2:b0:1b:8a:
c3:1e:1b:41:d9:b8:1d:e2:96:b2:7a:72:10:3c:23:
e9:65:30:98:d1:25:fe:2a:9f:4d:7c:34:04:81:cb:
1a:ec:2b:1e:b1:68:b0:cb:37:c1:69:d4:a3:d2:20:
92:1a:39:5d:c0:7f:3f:9e:2d:53:e1:5b:7c:9d:71:
25:06:6e:8c:41:de:d0:94:55:6a:64:9f:17:c7:b2:
8e:74:b7:c0:b6:62:a1:4b:08:ad:60:ae:7a:b0:fe:
7b:8c:1c:76:cd:26:6f:c9:61:83:45:e5:70:94:a1:
22:9f:c6:5b:24:6f:ac:a4:c4:e0:ef:34:83:be:00:
21:e1:50:61:cc:10:8f:ad:ec:f0:4a:76:89:a7:e3:
24:63:c2:f7:18:e7:d1:3b:cf:32:80:6d:94:d6:49:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:D8:A6:71:49:70:66:EE:EC:23:EF:14:64:61:09:D3:C7:BE:15
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:da:19:c9:7b:8c:df:c4:3e:0b:bc:c5:ba:18:3f:06:a5:bf:
a3:7c:cd:17:b2:44:9b:ef:26:28:09:a0:c6:bd:67:64:c9:67:
e0:2b:5e:d0:e6:59:44:70:b0:4b:e9:d5:a1:e1:4f:bf:1b:cd:
c2:aa:69:70:29:12:6f:83:49:19:5d:82:5b:c7:9c:2d:6c:d4:
22:fc:c4:a0:ce:21:95:f0:b5:3d:19:a7:cc:5e:df:67:52:81:
a1:75:0b:2b:46:d9:72:d1:bc:59:01:04:51:24:8a:50:d1:65:
df:97:7a:b5:17:29:f9:7f:bc:a2:f6:79:d9:39:19:32:36:64:
b2:70:80:f1:8f:e3:09:6b:f7:09:71:b4:34:0e:45:4e:0d:43:
62:92:66:f3:15:11:14:8c:85:b1:be:40:61:45:90:c1:9b:38:
42:1c:0a:49:ea:b8:cb:af:82:40:b7:dc:23:55:8d:c0:4c:63:
a3:14:2d:e5:22:b1:7d:cc:cc:7b:9e:38:6e:a6:12:8e:f3:f5:
41:89:84:0c:5e:ce:87:23:d4:16:d9:2c:87:72:2c:86:ba:ad:
0c:6e:8c:c4:ac:c4:81:2a:3a:4f:f1:71:22:bd:fd:2a:b9:a8:
bd:6b:0d:91:36:11:84:55:24:0f:31:62:5c:52:4b:b6:d5:89:
e9:e2:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:12 2025 by rpki-client